GPEN Practice Test

GPEN Practice Test practice questions, page 10 of 16, with answer review and explanations.

Question 46

A penetration tester wishes to stop the Windows Firewall process on a remote host running Windows Vista She issues the following commands: A check of the remote host indicates that Windows Firewall is still running. Why did the command fail?

  1. The kernel prevented the command from being executed.
  2. The user does not have the access level needed to stop the firewall.
  3. The sc command needs to be passed the IP address of the target.
  4. The remote server timed out and did not complete the command.

Question 47

By default Active Directory Controllers store password representations in which file?

  1. %system roots .system 32/ntds.dit
  2. %System roots /ntds\ntds.dit
  3. %System roots /ntds\sam.dat
  4. %System roots /ntds\sam.dit

Question 48

192.168.116.9 Is an IP address forvvww.scanned-server.com. Why are the results from the two scans, shown below, different?

  1. John.pot
  2. John conf
  3. John.rec
  4. John.ini

Question 49

You have been contracted to perform a black box pen test against the Internet facing servers for a company. They want to know, with a high level of confidence, if their servers are vulnerable to external attacks. Your contract states that you can use all tools available to you to pen test the systems. What course of action would you use to generate a report with the lowest false positive rate?

  1. Use a port scanner to find open service ports and generate a report listing allvulnerabilities associated with those listening services.
  2. Use a vulnerability or port scanner to find listening services and then try to exploitthose services.
  3. Use a vulnerability scanner to generate a report of vulnerable services.
  4. Log into the system and record the patch levels of each service then generate areport that lists known vulnerabilities for all the running services.

Question 50

You successfully compromise a target system's web application using blind command injection. The command you injected is ping-n 1 192.168.1.200. Assuming your machine is 192.168.1 200, which of the following would you see?

  1. Ping-n 1 192.168.1 200 on the compromised system
  2. A 'Destination host unreachable' error message on the compromised system
  3. A packet containing 'Packets: Sent - 1 Received = 1, Loss = 0 (0% loss) on yoursniffer
  4. An ICMP Echo packet on your sniffer containing the source address of the target